Return app from src/app.php, run in web/index.php

This better aligns with the pattern for the console, and could make
unit testing controllers in the future easier as well.
Move data update code out of Cron controller class

This will enable running the cron tasks through the console in the
future, as well as making the updates more easily unit-testable.